changes

app.py

@@ -71,7 +71,19 @@ def set_api_key():
 def generate_notebook_route():
     # SECURITY FIX: Only use session API key, never a global one
     api_key = session.get("api_key") if "api_key" in session else None
-    
+
+    # Fallback: check URL parameter for API key if not set in session
+    if not api_key:
+        api_key_param = request.args.get('api_key_param')
+        if api_key_param:
+            try:
+                genai.configure(api_key=api_key_param)
+                model = genai.GenerativeModel("gemini-2.0-pro-exp-02-05")
+                session["api_key"] = api_key_param
+                api_key = api_key_param
+                logger.info("API key set from URL parameter in generate_notebook_route")
+            except Exception as e:
+                logger.error(f"API key validation error from URL parameter in generate_notebook_route: {str(e)}")
     if not api_key:
         logger.warning("Generate notebook request without API key")
         return jsonify({"success": False, "message": "API key not set - please set your API key in the settings"}), 401